Independent consultant · Remote-first · International projects
I design, build and review networks for small and growing organizations — offices, branches, cloud links and the security controls around them. Vendor-neutral advice, careful change management and documentation your team can actually use.
01
Hands-on engineering and review work, scoped to what you actually need.
Topology, IP addressing plans, VLAN and zone segmentation, redundancy and growth planning for offices, branches and small server rooms.
Configuration and troubleshooting of switched and routed networks, from access layer to internet edge.
Perimeter and internal firewall policy design, rule-base clean-up, and secure remote and site-to-site access.
Configuration reviews of network devices and Linux servers against widely used best practices, delivered as a prioritized, practical report.
Encrypted, monitored links between sites, cloud workloads and distributed teams, with clear access control.
Turning undocumented networks into something your team can operate: inventories, diagrams and runbooks.
02
Typical building blocks. Equipment and software are chosen per project; no vendor partnership or reseller status is implied.
Structured access/core design, Wi-Fi segmentation, PoE planning and resilient uplinks.
Next-generation firewall deployments, zone-based policy and east-west segmentation.
Encrypted tunnels between offices and cloud networks with routing that fails over cleanly.
VPN and secure administration access for distributed staff, with MFA-ready designs.
Syslog collection, availability checks and sensible alerting for network health and security events.
Reusable configuration standards for routers, switches, firewalls and Linux servers.
03
Illustrative examples of the kind of problems this work addresses. They are not descriptions of specific client projects.
Situation: one subnet for staff, guests, printers and cameras.
Approach: segment into VLANs and firewall zones, separate guest Wi-Fi, document the result.
Outcome sought: smaller blast radius and easier troubleshooting.
Situation: ad-hoc tunnels, unclear routing, outages when a link drops.
Approach: consistent addressing, redundant encrypted links and tested failover.
Outcome sought: predictable connectivity with monitoring.
Situation: years of accumulated "allow any" rules.
Approach: review traffic and ownership, rebuild a least-privilege policy in stages.
Outcome sought: a rule base that can be audited and maintained.
04
Simple, transparent steps. Scope and terms are agreed before any work starts.
05
Yes. Most design, review and configuration work can be done remotely with appropriate, client-controlled access. On-site needs are discussed case by case.
No. Advice is vendor-neutral. Where equipment is needed, options are recommended and you purchase through your preferred supplier.
Work is defensive: design, hardening and configuration review. Any security assessment is performed only on systems you own or are explicitly authorized to manage, under an agreed written scope.
There is no public price list. Each request is scoped first, and an estimate is shared before any work begins.
No — it is an independent, personal practice.
06
The best way to reach me is Telegram. Share a short description of your environment and what you'd like to achieve — please don't send passwords or sensitive configuration in a first message.